Best Practice Detail

13-8-8113

Network Operators, Service Providers, and Equipment Suppliers should not permit local logon of users other than the system administrator. Local logon of a system administrator should be used only for troubleshooting or maintenance purposes. Some systems differentiate a local account database and network-accessible, centralized account database. Users should be authenticated via a network-accessible, centralized account database, not a local accounts database.

Status: Rollover New

References/Comments: Department of Defense Telecommunications and Defense Switched Network Secuirty Technical Implementation Guide (Version 2, Release 3). 'http://www.atis.org/ - ATIS-0300276.2008 Operations, Administration, Maintenance, and Provisioning Security Requirements for the Public Telecommunications Network: A Baseline of Security Requirements for the Management Plane: March 2008.

Historical events:

• Network Operators
• Service Providers
• Equipment Suppliers
• Cable
• Internet/Data
• Wireline
• Cyber Security
• Information Protection
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII